
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0E0F8FA3C520E6A89C4C5B4A8958A9813FAA513C.cer
File: 0E0F8FA3C520E6A89C4C5B4A8958A9813FAA513C.cer (raw, json)
Hash identifier: YI9ukPPe/ZqbuNFO8DykV/wVVAKXhPce/V23O2k5X5g=
Subject key identifier: 0E:0F:8F:A3:C5:20:E6:A8:9C:4C:5B:4A:89:58:A9:81:3F:AA:51:3C
Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78
Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
Certificate serial: 706CB0CB5C4A817A49536D9C0F72EF28CA120536
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
Manifest: rsync://repository.lacnic.net/rpki/lacnic/1BEE77A9905E208CB13813A923CD22A56021449CF8C671FBAD47C4989783A418/0/0E0F8FA3C520E6A89C4C5B4A8958A9813FAA513C.mft
caRepository: rsync://repository.lacnic.net/rpki/lacnic/1BEE77A9905E208CB13813A923CD22A56021449CF8C671FBAD47C4989783A418/0/
Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before: Wed 28 Jan 2026 07:41:54 +0000
Certificate not after: Wed 27 Jan 2027 07:46:54 +0000
Subordinate resources: AS: 52413
IP: 201.220.16.0/21
IP: 2803:8900::/32
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 21 Feb 2026 22:16:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:6c:b0:cb:5c:4a:81:7a:49:53:6d:9c:0f:72:ef:28:ca:12:05:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678
Validity
Not Before: Jan 28 07:41:54 2026 GMT
Not After : Jan 27 07:46:54 2027 GMT
Subject: CN=0E0F8FA3C520E6A89C4C5B4A8958A9813FAA513C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:bd:54:3d:7a:1f:e5:ba:83:a4:d1:26:82:25:
9d:f3:df:b8:db:f2:b1:fb:49:9f:ff:d7:66:99:b4:
6a:8d:96:ae:66:75:4a:b2:c8:e8:5a:23:85:ca:19:
51:7f:24:21:80:47:b0:76:0d:c6:33:30:c8:a8:7a:
3a:db:9e:3f:e9:da:7e:7e:0f:f2:b6:46:43:e2:80:
e4:83:80:51:91:2e:f8:a8:d4:69:23:e3:21:84:64:
4e:af:55:58:39:b8:fa:fc:c2:82:84:49:6f:e1:47:
f5:6f:c5:56:8e:5e:ef:0a:29:db:41:32:9a:c0:8e:
f7:ca:cb:5d:cb:b7:6e:ec:14:4c:c6:8c:4a:4a:a3:
12:ec:1d:5b:7d:e2:77:c0:d4:03:69:9f:b3:b4:5b:
2b:2d:29:0b:b5:92:10:47:45:5d:74:ad:da:60:85:
a9:14:f1:5f:1c:68:2b:24:8b:c8:f0:3a:ef:13:58:
8c:7d:d4:07:72:2a:62:5a:c8:06:1c:51:5d:a0:06:
74:42:1d:c6:5d:ec:34:b2:77:c9:94:9c:7d:e7:7d:
d9:fd:97:17:6d:9d:71:5f:03:83:cf:e7:58:35:8f:
8d:c9:d9:8a:0d:51:e8:45:a9:01:0d:84:84:4a:fa:
f9:cd:58:96:88:56:3f:3b:5f:75:6c:67:ae:2e:1d:
93:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
0E:0F:8F:A3:C5:20:E6:A8:9C:4C:5B:4A:89:58:A9:81:3F:AA:51:3C
X509v3 Authority Key Identifier:
keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
Subject Information Access:
CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/1BEE77A9905E208CB13813A923CD22A56021449CF8C671FBAD47C4989783A418/0/
RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/1BEE77A9905E208CB13813A923CD22A56021449CF8C671FBAD47C4989783A418/0/0E0F8FA3C520E6A89C4C5B4A8958A9813FAA513C.mft
RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.220.16.0/21
IPv6:
2803:8900::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
52413
Signature Algorithm: sha256WithRSAEncryption
09:29:b0:5c:29:4f:7a:ff:f3:02:7e:a2:5c:4a:d8:93:e6:58:
55:b4:1e:17:7f:d1:c1:f9:c1:b8:7f:4d:63:8f:c3:82:22:3c:
36:13:fd:b4:24:cd:99:31:8f:a2:08:4b:c6:94:9a:3e:5b:7c:
47:bd:00:48:9e:50:33:13:1b:3e:34:11:ac:e9:44:29:f5:c1:
66:48:cf:0a:7b:f4:ff:d6:1c:34:13:cf:32:e5:47:a3:19:5f:
0a:48:62:a3:df:6a:15:35:b2:d5:23:54:51:46:2c:56:c7:14:
10:b8:3f:d2:56:7b:ca:df:dd:68:84:c3:ee:72:37:28:72:a2:
56:2c:51:e7:82:1d:79:b4:e4:93:0b:af:b1:96:a6:2b:1d:1f:
3b:64:82:24:a1:7f:21:45:87:d5:bb:38:a9:2a:49:6a:58:d9:
5e:e6:eb:c5:5f:4b:11:ef:27:1e:a2:f6:a7:1e:d4:01:b2:6a:
11:09:58:3e:df:66:6a:bb:7e:f8:b7:f8:62:ca:c3:96:5c:8a:
ac:42:d0:e5:4c:2c:ad:20:91:e1:9f:46:19:ef:04:ed:5a:49:
e5:de:ad:60:c3:15:35:5d:6b:b5:de:0a:d0:47:65:76:b9:14:
4b:21:1a:1d:2f:fe:f0:dd:f6:61:84:6a:9f:90:1a:11:ac:4b:
e9:ae:cc:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 18 17:17:30 2026 by rpki-client